Attackers hitting GeoVision camera software at multiple organizations in waves (Huntress SOC, details still emerging)

On 8 Nov 2026 Huntress said its SOC spent the morning investigating a couple of waves of attacker activity involving GeoVision camera software across multiple organizations, and is still monitoring. Which GeoVision product, which flaw or access route, and what the attackers did afterwards are unknown so far; Huntress has not published a write-up yet. Not yet tied to the earlier Huntress CMS.exe camera-software campaign (CMP-202610-attackers-break-in-through-windows-camera-management-softwar), which named no vendor.